opendesk-edu

Application Data Storages

To provide a feasible backup and restore concept, a thorough overview of all openDesk applications and their related data storages (ephemeral & persistent) is provided in the following subsection.

Overview

The provided diagram shows all relevant openDesk applications on the left and their utilized data storages on the right. For more detailed information about each application refer to the table in Details.

---
config:
  sankey:
    showValues: false
    linkColor: target
---
sankey-beta

ClamAV,PersistentVolume,1

Element/Synapse,PostgreSQL,1
Element/Synapse,PersistentVolume,1

Intercom-Service,Redis,1

Nextcloud,PostgreSQL,1
Nextcloud,S3,1
Nextcloud,Redis,1

Nubus,PostgreSQL,1
Nubus,S3,1
Nubus,PersistentVolume,1
Nubus,Memcached,1

OpenProject,PostgreSQL,1
OpenProject,S3,1
OpenProject,PersistentVolume,1
OpenProject,Memcached,1

OX App Suite,MariaDB,1
OX App Suite,Redis,1
OX App Suite,S3,1

OX Connector,PersistentVolume,1

OX Dovecot,Cassandra,1
OX Dovecot,PersistentVolume,1
OX Dovecot,S3,1

Postfix,PersistentVolume,1

XWiki,PostgreSQL,1
XWiki,PersistentVolume,1

Details

Application Data Storage Backup Content (Default) Identifier Details
ClamAV PVC No ClamAV Database clamav-database-clamav-simple-0 /var/lib/clamav
Dovecot PVC Yes openDesk CE only: User mail directories dovecot /srv/mail
  PVC Yes openDesk EE only: Metacache directory var-lib-dovecot-dovecot-0 /var/lib/dovecot
  S3 Yes openDesk EE only: User mail dovecot dovecot
  Cassandra Yes openDesk EE only: Metadata and ACLs dovecot_dictmap, dovecot_acl  
Element/Synapse PostgreSQL Yes Application’s main database matrix  
  PVC Yes Attachments media-opendesk-synapse-0 /media
    Yes Sync and state data matrix-neodatefix-bot /app/storage
Intercom-Service Redis No Shared session data    
Nextcloud PostgreSQL Yes Application’s main database Meta-Data nextcloud  
  S3 Yes The Nextcloud managed user files nextcloud  
  Redis No Distributed caching, as well as transactional file locking    
Nubus PostgreSQL Yes Main database for Nubus’ IdP Keycloak keycloak  
    Yes Login actions and device-fingerprints keycloak_extensions  
    Optional Store of the temporary password reset token selfservice  
    Optional OIDC session storage umsAuthSession  
    No At the moment the notification feature not enabled in openDesk notificationsapi  
    No At the moment the Guardian features are currently not enabled in openDesk guardianmanagementapi  
  S3 No Static files for Portal ums  
  PVC Yes openLDAP database (primary R/W Pods), when restore select the one from the leader shared-data-ums-ldap-server-primary-0 /var/lib/univention-ldap
    Yes openLDAP process data shared-run-ums-ldap-server-primary-0 /var/run/slapd
    No openLDAP database (secondary R/O Pods), secondaries can sync from the primary shared-data-ums-ldap-server-secondary-0 /var/lib/univention-ldap
    No openLDAP process data shared-run-ums-ldap-server-secondary-0 /var/run/slapd
    Yes The state of the listener data-ums-provisioning-udm-listener-0 /var/log/univention
/var/lib/univention-ldap/schema/id
/var/lib/univention-directory-listener
    No Cache group-membership-cache-ums-portal-consumer-0 /usr/share/univention-group-membership-cache/caches
    Yes Queued provisioning objects nats-data-ums-provisioning-nats-0 /data
  Memcached No Cache for UMC Server    
OpenProject PostgreSQL Yes Application’s main database openproject  
  S3 Yes Attachments, custom styles openproject  
  Memcached No Cache    
  PVC No PVC backed emptyDir as K8s cannot set the sticky bit on standard emptyDirs openproject-<web/worker>-*-tmp /tmp
    No PVC backed emptyDir as K8s cannot set the sticky bit on standard emptyDirs openproject-<web/worker>-app-*-tmp /app/tmp
OX App Suite MariaDB Yes Application’s control database to coordiate dynamically created ones configdb  
    Yes Dynamically creates databases of schema PRIMARYDB_ncontaining multiple contexts PRIMARYDB_*  
    Yes OX Guard related settings oxguard*  
  S3 Yes Attachments of meetings, contacts and tasks openxchange  
  Redis Optional Cache, session related data, distributed maps    
OX Connector PVC Optional OX Connector: Caching of OX object data for backup /var/lib/univention-appcenter/apps/ox-connector
    Yes OX Connector: OX SOAP API credentials ox-connector-ox-contexts-ox-connector-0 /etc/ox-secrets
OX Dovecot PVC Yes openDesk CE only: User mail directories dovecot /srv/mail
  PVC Yes openDesk EE only: Various meta data and caches var-lib-dovecot /var/lib/dovecot
  S3 Yes Dovecot Pro/openDesk EE only: User mail dovecot dovecot
  Cassandra Yes Dovecot Pro/openDesk EE only: Metadata and ACLs dovecot_dictmap, dovecot_acl  
Postfix PVC Yes Mail spool postfix /var/spool/postfix
XWiki PostgreSQL Yes Application’s main database xwiki  
  PVC Yes Attachments xwiki-data-xwiki-0 /usr/local/xwiki/data

Additionally, the following persistent volumes are mounted by Pods that serve as a data storage for the applications mentioned above.

These services are not ment for production use, so you can ignore these as you surely backup your production services instead.

Service Pod Volume Name PVC MountPath Comment
MariaDB mariadb-* data data-mariadb-0 /var/lib/mysql  
MinIO minio-*-* data minio /bitnami/minio/data  
PostgreSQL postgresql-* data data-postgresql-0 /mnt/postgresql  
Redis redis-master-* redis-data redis-data-redis-master-0 /data  
Cassandra cassandra-* data data-cassandra-* /bitnami/cassandra openDesk EE only